Splunk Search

How to show multiple values in a Pie chart?

shiv1593
Communicator

Hi All,

I have a dashboard, which contains a pie chart, that looks like this.

alt text

As visible, there are only 5 values in it. I need to show more values in it, like in the next pie chart, and remove that 0% from Others. It should not be 0%.

alt text

Any help will be highly appreciated.

0 Karma

somesoni2
Revered Legend

You would need to set charting.chart.sliceCollapsingThreshold attribute in your pie chart visualization. By default any slice whose percent value is less than 0.01 of pie or 1% are collapsed into other. You can decrease this value per your need. See this for more information.

https://docs.splunk.com/Documentation/SplunkCloud/6.6.3/Viz/ChartConfigurationReference#Pie_charts

0 Karma

shiv1593
Communicator

Hello,

I tried changing the value, but no luck. I even reduced it to 0.001, still there are only 5 values.

0 Karma

niketn
Legend

What is the query you are using? Can you add the results from the table which your query builds?

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

shiv1593
Communicator

Query:

Host=sss Call_DESCRIPTION_Text="" MEDIUM="" CALL_NUMBER="" MEDIUM=""
| stats count(CALL_NUMBER) AS "Ticket Count" BY Call_DESCRIPTION_Text MEDIUM
| chart limit=0 usenull=f sum("Ticket Count") OVER Call_DESCRIPTION_Text BY MEDIUM
| rename Call_DESCRIPTION_Text AS "Top Issues Reported"
| addtotals
| sort - Total

Here are a few examples of the stats data of my query.

Top Issues Reported Chat Fax Mail Own Phone Portal
REMOTE ACCESS RELATED ISSUES 14 3584 2 56508 3162
USER REQUESTING INFORMATION 1 3611 1641 1692
WINDOWS PASSWORD ISSUES 28 6244 15
AD PASSWORD RESET ISSUES 1 3340 989 794
MISCELLANEOUS PASSWORD 280 3353 51
MCAFEE LOGIN RELATED ISSUES 11 3586 3
USER LOGIN ISSUE 185 3300 35
CONNECTING TO VPN RELATED 1 87 3253 72

0 Karma

shiv1593
Communicator

Sorry for the gibrish data values, as I am unable to add an image in the answer.

0 Karma

493669
Super Champion

try to post image in imgur and share url to get more clarity ...

0 Karma
Get Updates on the Splunk Community!

Webinar Recap | Revolutionizing IT Operations: The Transformative Power of AI and ML ...

The Transformative Power of AI and ML in Enhancing Observability   In the realm of IT operations, the ...

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...